CVE-2026-47148

UNKNOWN 0.0

Groups GetGroupMembership count/list-length mismatch in EmberZNet v9.0.2

CVSS Score

0.0

EPSS Score

0.0%

EPSS Percentile

0th

In EmberZNet v9.0.2 and earlier, malformed GetGroupMembership commands can trigger repeated reads past the end of the message payload and terminate the process. These messages must come from a device that has already joined the network, and no information leakage back to the sender was observed. Only devices supporting the Groups cluster may be impacted.

CWE	CWE-125
Vendor	silicon labs
Product	emberznet
Published	Jun 25, 2026
Last Updated	Jun 25, 2026

Stay Ahead of the Next One

Get instant alerts for silicon labs emberznet

Be the first to know when new unknown vulnerabilities affecting silicon labs emberznet are published — delivered to Slack, Telegram or Discord.

Get Free Alerts → Free · No credit card · 60 sec setup

Affected Versions

Silicon Labs / EmberZNet

0 ≤ 9.0.2

References

NVD ↗ CVE.org ↗ EPSS Data ↗

siliconlabs.lightning.force.com: https://siliconlabs.lightning.force.com/sfc/servlet.shepherd/document/download/069Vm00000pEGPQIA4?operationContext=S1 github.com: https://github.com/SiliconLabsSoftware/sisdk-release/

Credits

Junming C. (@Chapoly1305) and Prof. Qiang Zeng of George Mason University